x86-64 Malware Crypter built in Rust for Windows with Anti-VM, powered by memexec

1. Put your Portable Executable in /crypt/ and rename it to example.exe (or change the code to be the same name as your PE)
2. In /crypt/ cargo run (will output encrypted_bytes.bin and key.txt)
3. move encrypted_bytes.bin and key.txt to /stub/src/
4. In /stub/ cargo build --target x86_64-pc-windows-gnu --release or build without --release to keep debug symbols
5. compiled exe will be in /stub/target/debug/ named "stub.exe"

• Windows x86-64
• Windows x86

• .NET not supported
• Files over 600MB not supported

• File dialogue choose file instead of renaming code strings/executable names
• Automatically move encrypted bytes and key into stub for compiling
• GUI
• Obfuscated Strings

This is a tool used to test the Static + Dynamic detection capabilites of AV and EDR, use of this project is at your own risk

• User Execution: Malicious File T1204.002
• Deobfuscate/Decode Files or Information T1140
• Embedded Payloads T1027.009
• System Checks T1497.001
• Reflective Code Loading T1620
• Boot or Logon Autostart Execution: Registry Run Keys / Startup Folder T1547.001

https://crates.io/crates/memexec https://crates.io/crates/inside-vm